
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3136312e302f32342d3234203d3e203338333831.roa
File: 3132322e3131392e3136312e302f32342d3234203d3e203338333831.roa (raw, json)
Hash identifier: Y0wDlnr3XFhczVQEuYQwWxP5MwFz1HiWXKK8v9tc6AE=
Subject key identifier: 74:5A:1F:6B:47:E1:07:CA:07:E1:4B:2E:03:00:4F:B8:41:60:50:B6
Certificate issuer: /CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Certificate serial: 4128DAAF794C0FF65EF87FD32DEA485E1F7054ED
Authority key identifier: 51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3136312e302f32342d3234203d3e203338333831.roa
Signing time: Wed 22 Apr 2026 07:57:30 +0000
ROA not before: Wed 22 Apr 2026 07:52:30 +0000
ROA not after: Wed 21 Apr 2027 07:57:30 +0000
asID: 38381
IP address blocks: 122.119.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 14 May 2026 11:49:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
41:28:da:af:79:4c:0f:f6:5e:f8:7f:d3:2d:ea:48:5e:1f:70:54:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5115966FB62A2BDB4D65D974DF0DD9B020811D8D
Validity
Not Before: Apr 22 07:52:30 2026 GMT
Not After : Apr 21 07:57:30 2027 GMT
Subject: CN=745A1F6B47E107CA07E14B2E03004FB8416050B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:7d:d4:87:98:83:73:2c:cf:57:25:57:f1:ad:
34:ea:d8:1a:54:5c:83:31:4a:94:86:8f:42:6e:a2:
77:65:e3:f4:af:f4:dd:31:7c:0b:01:a5:aa:6b:20:
bc:b3:d5:da:62:52:90:57:4b:d3:2f:f2:85:3d:e3:
ed:47:60:8b:15:11:35:e6:bd:71:e8:13:80:71:1d:
9d:57:be:8b:4c:bd:57:2e:ee:4a:c7:14:00:16:b0:
84:a5:77:dd:67:9b:cc:99:85:86:3a:7c:e3:1c:83:
52:0f:dc:9f:c2:43:13:b7:95:50:a2:73:c8:36:32:
81:05:52:18:79:3e:f4:6a:46:b5:87:7b:63:f1:a6:
d4:0d:45:72:a5:b6:2e:87:97:bb:21:95:b5:f6:69:
48:39:65:c8:85:a3:d2:c6:a1:00:bf:9a:28:01:0a:
cc:85:b9:31:e2:fe:43:db:f0:18:ac:27:dd:15:2e:
42:b0:0f:69:58:5c:50:f7:ed:af:35:b3:14:94:5b:
f7:9e:2c:9a:46:4b:ee:e4:0a:03:7e:93:2e:f9:fa:
62:8d:7b:b2:20:c0:95:f4:3d:19:36:40:fe:8d:39:
f5:b9:90:10:70:d8:c3:da:75:c4:34:b5:8e:df:58:
79:a9:62:5a:ce:2f:36:0d:b8:a0:69:3a:81:63:0e:
cc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5A:1F:6B:47:E1:07:CA:07:E1:4B:2E:03:00:4F:B8:41:60:50:B6
X509v3 Authority Key Identifier:
keyid:51:15:96:6F:B6:2A:2B:DB:4D:65:D9:74:DF:0D:D9:B0:20:81:1D:8D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/5115966FB62A2BDB4D65D974DF0DD9B020811D8D.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1095903841322270721/0/3132322e3131392e3136312e302f32342d3234203d3e203338333831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
122.119.161.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:4c:f4:46:83:68:ac:40:11:48:70:4a:29:91:4e:a2:43:b9:
9f:9d:62:0d:63:04:0a:4f:df:b0:43:d2:6c:92:fa:bc:b2:4d:
e9:83:1d:5e:c1:f8:7c:4b:d6:c2:e4:da:97:6e:25:35:7b:7a:
e7:f4:9c:1f:d7:0e:18:38:75:15:85:77:21:0f:d9:b4:bb:d1:
23:5c:bd:d9:e8:8b:15:d6:fe:c4:a8:28:69:a5:72:69:fb:64:
1b:43:70:37:0c:29:81:34:f8:d1:70:dc:ec:bb:ab:59:d6:13:
ad:8d:c1:4b:11:c2:e9:05:1d:55:50:fb:8b:38:1b:5d:58:c5:
78:5b:c7:83:e0:59:80:bf:15:0c:86:4a:7e:a1:57:e6:93:5c:
66:28:5b:c5:2d:b2:a2:a4:1c:36:94:a9:5c:6b:f6:58:3a:79:
43:b5:77:0d:7f:c6:b2:5e:01:0e:15:14:e0:d8:84:cf:42:9b:
b1:84:de:ec:d2:5c:c2:a3:e9:26:5d:b3:42:94:7a:96:06:a1:
a9:3a:1b:ee:92:8f:10:f1:0d:29:46:af:b2:ef:eb:9c:c4:c9:
6e:14:f0:90:86:15:25:7d:6d:f2:23:b6:c9:7e:a6:0a:10:85:
a9:5a:b2:22:75:3e:5a:e3:09:e4:94:eb:b0:e8:45:ba:e9:4d:
7b:73:84:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:31:35 2026 by rpki-client